Commit Graph

40 Commits

Author SHA1 Message Date
Bradley Girardeau
7b6547abf7 Clean up naming and add documentation 2015-07-30 17:36:40 -07:00
Bradley Girardeau
c7b806ebf6 mfa: code cleanup 2015-07-28 11:55:46 -07:00
Bradley Girardeau
083226f317 mfa: improve edge cases and documentation 2015-07-27 21:14:00 -07:00
Bradley Girardeau
0efdcb7ae0 mfa duo: better error messages 2015-07-27 21:14:00 -07:00
Bradley Girardeau
4b87af123d mfa: add test cases for MFA, Duo 2015-07-27 21:14:00 -07:00
Bradley Girardeau
b581bf20e0 mfa: add MFA wrapper with Duo second factor 2015-07-27 21:14:00 -07:00
Armon Dadgar
edb60b5832 helper/kdf: changing argument name for clarity 2015-07-05 14:01:56 -07:00
Armon Dadgar
8d0840fb82 helper/kdf: adding lib for key derivation from NIST800-108 2015-07-05 14:01:21 -07:00
Armon Dadgar
f975cc6e2b helper/salt: track if salt was generated 2015-06-30 16:47:49 -07:00
Armon Dadgar
74714e1122 helper/salt: adding little helper for salting 2015-06-30 14:04:18 -07:00
Armon Dadgar
e9f05fbe4f helper/uuid: single generateUUID definition 2015-06-30 12:38:32 -07:00
Armon Dadgar
01592c0744 Merge pull request #310 from jefferai/f-pki
Initial PKI backend implementation
2015-06-21 11:12:22 +01:00
Steve Wills
fce09c2962 allow building on FreeBSD
Allow this file to build on FreeBSD
2015-06-19 16:59:24 -04:00
Jeff Mitchell
15594561ab Add unit tests for certutil, and fix a whitespace stripping issue.
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-19 16:06:56 -04:00
Jeff Mitchell
435aefc072 A few things:
* Add comments to every non-obvious (e.g. not basic read/write handler type) function
* Remove revoked/ endpoint, at least for now
* Add configurable CRL lifetime
* Cleanup
* Address some comments from code review

Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-19 12:48:18 -04:00
Jeff Mitchell
23ba605068 Refactor to allow only issuing CAs to be set and not have things blow up. This is useful/important for e.g. the Cassandra backend, where you may want to do TLS with a specific CA cert for server validation, but not actually do client authentication with a client cert.
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-18 15:22:58 -04:00
Jeff Mitchell
c4256601f2 Restructure a little bit to make the helper library fully standalone. This makes it easier to move around later if desired, and for use by external programs.
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-18 06:42:57 -04:00
Jeff Mitchell
31e680048e A lot of refactoring: move PEM bundle parsing into helper/certutil, so that it is usable by other backends that want to use it to get the necessary data for TLS auth.
Also, enhance the raw cert bundle => parsed cert bundle to make it more useful and perform more validation checks.

More refactoring could be done within the PKI backend itself, but that can wait.

Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-17 16:07:20 -04:00
Mitchell Hashimoto
4502bb71b8 helper/kv-builder: blank values should not panic 2015-06-16 10:00:02 -07:00
Mark Junker
94adbb3d49 Fixes #83 2015-04-29 10:20:09 +02:00
Mitchell Hashimoto
04215756ea vault: add helper/mlock for doing mlock 2015-04-28 14:59:43 -07:00
Mitchell Hashimoto
ae1c71085c helper/passsword: fix windows compilation 2015-04-28 09:23:48 -07:00
Mitchell Hashimoto
574050b53f helper/kv-builder 2015-04-07 22:30:25 -07:00
Mitchell Hashimoto
3e4a8a926e command/auth: framework for supporting more auth methods 2015-04-05 20:50:18 -07:00
Mitchell Hashimoto
a196d194a1 command/server: cleaner output 2015-04-04 12:06:41 -07:00
Mitchell Hashimoto
1e7a94f6ba helper/password: catch ctrl-c if possible 2015-04-01 17:27:29 -07:00
Mitchell Hashimoto
12566c645c logical/framework, logical/testing 2015-03-15 16:39:49 -07:00
Mitchell Hashimoto
0496a0837a helper/backend: use logical package 2015-03-15 14:57:19 -07:00
Mitchell Hashimoto
5e804c26e9 helper/backend: start acceptance test framework 2015-03-14 17:18:19 -07:00
Mitchell Hashimoto
8ecbb9d2d1 helper/backend: auto-generate help route 2015-03-14 10:12:50 -07:00
Mitchell Hashimoto
0890ece955 helper/backend: one callback per operation 2015-03-14 00:19:25 -07:00
Mitchell Hashimoto
24f7ddfd8c helper/backend: HandleRequest works 2015-03-13 23:58:20 -07:00
Mitchell Hashimoto
da2c1d4896 helper/backend: store captures for a path 2015-03-13 23:48:49 -07:00
Mitchell Hashimoto
f19c63de4a helper/backend: cache route regexps (98% speedup)
benchmark                 old ns/op     new ns/op     delta
BenchmarkBackendRoute     49144         589           -98.80%
2015-03-13 23:25:17 -07:00
Mitchell Hashimoto
9e7add90b2 helper/backend: benchmark route 2015-03-13 23:22:48 -07:00
Mitchell Hashimoto
f5893adb8a helper/backend: basic path routing (naive) 2015-03-13 23:17:25 -07:00
Mitchell Hashimoto
6575c9355b helper/backend: add default values 2015-03-13 21:15:20 -07:00
Mitchell Hashimoto
d39b117281 helper/backend: start this thing 2015-03-13 21:11:19 -07:00
Mitchell Hashimoto
2bbd5fa66e command/server: add config loading 2015-03-12 15:21:11 -07:00
Mitchell Hashimoto
205857be65 helper/password: for reading passwords securely 2015-03-04 00:31:35 -08:00